Sr. Network Engineer (ONE-4E)

Location: Fort Meade, MD
Category: Network Administration and Ops
Schedule (FT/PT): Full Time
Travel Required: Yes, 25% of the time
Shift: Day
Potential for Telework: Yes, 25%
Clearance: Secret

Description
GES is seeking a Sr. Network Engineer to join our Defense Enclave Services (DES) team at Ft. Meade, MD.

POSITION SUMMARY:
This is an exciting opportunity to use your experience, skill, and leadership to successfully execute Defense Information Systems Agency (DISA) migration to the Department of Defense s Fourth Estate (DoD 4th Estate) agencies into a Common Use information technology (IT) infrastructure.

The team will deliver Network Infrastructure services that will support the transition, infrastructure, network operations and management, engineering and innovation, cybersecurity services, and technical refresh for a Single Service Provider (SSP) network environment with all 4th Estate users.

CLEARANCE REQUIREMENT:
Must hold an active Secret security clearance to start and be able to obtain a Top Secret. (US Citizenship required)

PRIMARY RESPONSIBILIES:

Provide Networking Expertise in network design, integration, test, security, and implementation of Network Services for DISA DODNet.
Provide expert knowledge of network engineering and operations, large scale enterprise network solution implementation and transition to Network Operations, as well as test and evaluation activities. Perform highly technical maintenance involving network devices routers, switches, security solutions, and WANX.
Participate in technical development of watch staff.
Provide tier-III support for Large-scale Enterprise Network operations and NOC watch staff.
Propose new solutions to Network Domain Architects to define and/or continuously improve:
o Direct STIG compliant configuration baselines, versioning, and compliance tracking
o Evaluate the effectiveness of Automation and best practice insertion opportunities
o Oversee development of SOPs/TTPs
o Continuous Service Improvements (CSI)
o System performance tuning and enhancements
o Create and maintain Engineering Implementation Plans (EIP)
Evaluate network bandwidth needs and recommend measures to meet those requirements.
Provide expert knowledge of defense-in-depth standards, Network and Security architecture, network topology, IT device integrity, and common security elements.
Plan and execute network upgrades and maintenance activities with the appropriate Delivery Operations Managers, NOC Lead, Release Management team and other key stakeholders.
Serve as the senior Tier III escalation support engineer for Incident Management activities.
Develop and maintain technical documents, analyses, and reports.
Actively participate in Root Cause Analysis for Problem Management activities.
Able to work in a dynamic, fast-paced and mission-focused environment.

BASIC QUALIFICATIONS:
Bachelor's degree and 12+ years; additional years of related work experience may be substituted for a degree.
Effective written and oral communication and problem-solving skills. Minimum of DoD 8570.01 IAT Level II Certification prior to onboarding (ex: CompTIA Security+ CE).
An Associate level Network Vendor Certification is required prior to onboarding (from one of the following Vendors): Cisco, Juniper, CommScope/Ruckus/Brocade, F5 Networks or Aruba Networks. 8+ years experience engineering and troubleshooting networks, including extensive routing and switching experience such as MPLS, VPNs, routing protocols i.e. BGP, OSPF, IS-IS, switching protocols i.e. Spanning Tree Protocol, VLANs, LLDP, VoIP, Multicast protocols and emerging network technologies.
Excellent comprehension and in-depth knowledge of IP network/subnet addressing.
Experience presenting to senior customer management, customer stakeholders, and company management.
Experience executing circuit cutovers in the DISA environment.
Familiarity with the ITIL framework.
Ability to travel up to 25% including OCONUS potential travel.
Willingness to work or be called in to work during off-hours to meet customer mission support requirements PREFERRED

QUALIFICATIONS:
Previous work experience providing engineering and operational services on DISA supported networks.
Experience with Aruba ClearPass Policy Manager (CPPM) identity management solution.
Advanced/Professional level vendor certifications (Cisco, Juniper, Aruba, Palo Alto).
Demonstrated NET/SEC DevOps experience.
IAT Level III Certification (i.e. CISSP or equivalent).
ITIL v3/v4 certification/training.
Agile certifications or applicable experience.